All pastes #294360 Raw Edit

iptables

public text v1 · immutable
#294360 ·published 2006-12-28 11:56 UTC
rendered paste body
 iptables -L
Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     0    --  anywhere             anywhere
ACCEPT     0    --  10.9.1.187           10.9.1.255
logaborted  tcp  --  anywhere             anywhere            state RELATED,ESTABLISHED tcp flags:RST/RST
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded
ACCEPT     icmp --  anywhere             anywhere            icmp parameter-problem
nicfilt    0    --  anywhere             anywhere
srcfilt    0    --  anywhere             anywhere

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded
ACCEPT     icmp --  anywhere             anywhere            icmp parameter-problem
srcfilt    0    --  anywhere             anywhere

Chain OUTPUT (policy DROP)
target     prot opt source               destination
ACCEPT     0    --  anywhere             anywhere
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     icmp --  anywhere             anywhere            icmp destination-unreachable
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded
ACCEPT     icmp --  anywhere             anywhere            icmp parameter-problem
s1         0    --  anywhere             anywhere

Chain f0to1 (3 references)
target     prot opt source               destination
logdrop    0    --  anywhere             anywhere

Chain f1to0 (1 references)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             anywhere            udp dpts:33434:33600
logdrop    0    --  anywhere             anywhere

Chain logaborted (1 references)
target     prot opt source               destination
logaborted2  0    --  anywhere             anywhere            limit: avg 1/sec burst 10
LOG        0    --  anywhere             anywhere            limit: avg 2/min burst 1 LOG level warning prefix `LIMITED '

Chain logaborted2 (1 references)
target     prot opt source               destination
LOG        0    --  anywhere             anywhere            LOG level warning tcp-sequence tcp-options ip-options prefix `ABORTED '
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED

Chain logdrop (4 references)
target     prot opt source               destination
logdrop2   0    --  anywhere             anywhere

Chain logdrop2 (1 references)
target     prot opt source               destination
DROP       0    --  anywhere             anywhere

Chain logreject (0 references)
target     prot opt source               destination
logreject2  0    --  anywhere             anywhere

Chain logreject2 (1 references)
target     prot opt source               destination
REJECT     tcp  --  anywhere             anywhere            reject-with tcp-reset
REJECT     udp  --  anywhere             anywhere            reject-with icmp-port-unreachable
DROP       0    --  anywhere             anywhere

Chain nicfilt (1 references)
target     prot opt source               destination
RETURN     0    --  anywhere             anywhere
RETURN     0    --  anywhere             anywhere
RETURN     0    --  anywhere             anywhere
logdrop    0    --  anywhere             anywhere

Chain s0 (1 references)
target     prot opt source               destination
f0to1      0    --  anywhere             10.9.1.187
f0to1      0    --  anywhere             10.9.1.255
f0to1      0    --  anywhere             localhost.localdomain
logdrop    0    --  anywhere             anywhere

Chain s1 (1 references)
target     prot opt source               destination
f1to0      0    --  anywhere             anywhere

Chain srcfilt (2 references)
target     prot opt source               destination
s0         0    --  anywhere             anywhere
05:27:09@jindal # /etc/myfirewall.sh stop
Clearing iptables (created by KMyFirewall)...       Done.
05:27:23@jindal # iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
05:27:27@jindal # cat /etc/net
netscsid.conf  network/
05:27:27@jindal # cat /etc/network/
if-down.d/      if-pre-up.d/    interfaces      run/
if-post-down.d/ if-up.d/        options
05:27:27@jindal # cat /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback
address 127.0.0.1
netmask 255.0.0.0

# The primary network interface
auto eth0
iface eth0 inet static
        pre-up /etc/myfirewall.sh stop
        address 10.9.1.187
        netmask 255.255.255.0
        broadcast 10.9.1.255
        gateway 10.9.1.1
#       post-down /etc/myfirewall.sh stop


05:27:42@jindal #